ENGM90007: Project Management Practices
Lecture 04
Risk management – Part 2
Dr Omar Castrejon Campos
2023
1
Outline
• Risk Assessment
– Risk identification
– Risk analysis
– Risk evaluation
• Risk Treatment
2
Risk Assessment
Risk Assessment
Identification
Analysis
Evaluation
4
Risk Identification
Risk assessment process
The risk assessment process includes:
• risk workshops
• reviews of past project documentation
• talking to the experienced project managers
6
The cone of accuracy
7
Source: Project Cost Estimating Manual – Eighth Edition v1.1, Transport and Main Roads, December 2021
Internal and External factors
Toppinen, Anne et al. (2018). Internal and external factors of competitiveness shaping the future of wooden multistory construction in Finland and Sweden. 8
Construction Management and Economics. 37. 1-16. 10.1080/01446193.2018.1513162.
Risk Analysis
Risk Management Process (PMBOK)
10
Source: [Link]
Risks vs Uncertainties
Risks Uncertainties
Forecast (e.g. population) within expected range Forecast outside expected range
Designing risk relating to project scope Technological advancements or market disruptions
Due diligence risks (e.g soil contamination) with Future economic conditions, such as strength of Australian
expectations dollar, outside expectations
Stakeholder management issues Future legislative, legal or policy changes at State or
Commonwealth level
Loss of key project staff Conditional outcomes in interdependent investment
projects
Can be managed while striving to deliver intended Cannot be managed unless they were considered in
outcomes framing the investment strategy
• A successful strategy to deal with uncertainty will usually be flexible
11
Levels of uncertainty
12
Risk analysis methods
There are two broad ways to analyse risks:
• Qualitative risk analysis
• Quantitative risk analysis
Managing risks requires a combination of varied techniques and
methodologies.
13
Qualitative risk analysis
• Identifies the risks and opportunities and assesses the potential
consequences and treatment (avoid, treat, or minimise)
measures.
• Risk may be qualitatively evaluated through the process of:
– Quantify the likelihood of the risk
– Quantify the impact of the risk
– Manage risk
• The outcomes from this analysis are used as inputs to the
quantitative analysis. 14
Likelihood
Level Descriptor Description
A Almost certain The event is expected to occur in most circumstances
B Likely The event will probably occur in most circumstances
C Moderate The event should occur at some time
D Unlikely The event could occur at some time
E Rare The event may occur only in exceptional circumstances
15
Impact (or consequence)
Level Descriptor Description
1 Insignificant No injuries, low financial loss
2 Minor First aid treatment, on site release immediately contained, medium
financial loss
3 Moderate Medical treatment required, on site release contained with outside
assistance, high financial loss
4 Major Extensive injuries, loss of production capabilities, off site release
with no detrimental effects, major financial loss
5 Catastrophic Death, toxic release off site with detrimental effect, huge financial
loss
16
Management
Impact / Consequence
Likelihood Insignificant Minor Moderate Major Catastrophic
1 2 3 4 5
A (almost certain) S S H H H
B (likely) M S S H H
C (moderate) L M S H H
D (unlikely) L L M S H
E (rare) L L M S S
H: high risk, detailed research and management required at senior levels
S: significant risk, senior management attention needed
M: moderate risk, management responsibility must be specified
L: low risk, manage by routine procedures 17
Risk rating – A standard risk matrix
18
Source: Kaya, Gulsum. (2018). Good risk assessment practice in hospitals.
An example
19
Source: EP153 Project Risk Context Profiles
Risk index – Risk appetite
20
Quantitative risk analysis
• Estimates
• Sensitivity analysis
• Scenario analysis
• Probabilistic risk analysis
– Simple techniques – expected value
– Advanced techniques – Monte Carlo, Real Options
21
What price to consider in a project?
22
Sensitivity analysis and scenario analysis
23
Different scenarios
It is common to assign a three-point distribution to specific risks. These three
points represent the ‘best case’, ‘most likely case’, and ‘worst case’ scenario.
24
Value of risk
Value of risk = consequence x probability of occurrence
Expected value = $10,500 25
Decision Trees
26
Quantitative risk analysis
• Traditionally quantitative approach employs probabilistic tools,
techniques, templates and specialist software such as @Risk for
risk evaluation.
• Probabilistic risk evaluation (Monte Carlo simulation) approach is
mandatory for all major projects (in Queensland).
27
Project classification and Risk Context Profiles
28
Monte Carlo technique
29
Source: Henderson, Brent & Bui, Elisabeth. (2023). Determining Uncertainty in Sediment & Nutrient Transport Models for Ecological Risk Assessment.
Most common probability distributions
Uniform Triangular
Normal
Discrete All project estimates beyond
the business case milestone
must have P90 confidence
level.
30
Source: Project Cost Estimating Manual – Eighth Edition v1.1, Transport and Main Roads, December 2021
Real Options analysis
• Real options analysis extends the CBA framework
• It is an investment planning, evaluation and decision-making-framework
that incorporates flexible, qualitative and quantitative approaches to
better plan and manage projects with uncertainty
31
Real Options analysis
• A real option comprises:
– Option costs: costs associated with creating flexibility to change
investment strategy and maintain effective access to the option
– Exercise cost: the cost to exercise the option
– Life of an option: the time until the option is no longer valid or available
– Exercise trigger: the conditions that define when a real option should
be exercised
32
Real Options analysis
33
An example – Pilot plant construction
34
Real Option examples
• Option for future growth
• Option to wait and see
• Option to delay
• Option to expand
• Option to contract
• Option to choose
• Option to switch resources
• Option for phased and sequential investments
35
Flexible investment strategies
36
Example from DFT
37
Example from DFT
38
Example from DFT
39
Risk assessment results
• Consequence
• Likelihood
• Risk level and target level (level of risk acceptance)
• Actions to be taken
• Risk owner
• Completion dates
• Reporting schedule
40
Risk Treatment
Options for risk treatment
• Avoiding risk
• Taking opportunity
• Removing risk source
• Changing the likelihood
• Changing the consequences
• Sharing the risk
• Retaining the risk
42
43
Thank you